ed780b1afe60dcd2c329aaceacccb099c3b799b6c6a8d0c835a7f67be92b746a

Analysis

geolocation tags

eueuropelondonukunited-kingdom
user interaction
yes
max time kernel
874s
max time network
847s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
24/09/2026, 23:18

Target
VinReestr._1790236766796.apk
Size 10.1MB
Sample260924-3ac1dsvale
SHA256 ed780b1afe60dcd2c329aaceacccb099c3b799b6c6a8d0c835a7f67be92b746a
MD5 6140d1eb546f0672c97443e69d2b20f7
SHA1 91eb2a58b830b91f9c50a20a22bf05053eee3dba
SHA512 deab4756a8f9881aeb547a7f0654d2944dd51c62d8b29b8e2e32101702a5d9c985974a009a2266c43bfc00bc578a0adb395ecd141574d322ce5fac0e32b414c1
SSDEEP 196608:DrQx4HVqA9c7/ksnroMdQhzLErLRg2GTHCZMNxvLULdX1lusXc:ox4HVqX79cMdQhzgi2GMMNxvLguF
TLSH
T1AFB61216460C5911C83F4A3618EE4B92E3746A424F42DE3B21BDBD6B7F731D1CB817AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.swgwe.qlqvatdi

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.swgwe.qlqvatdi

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.swgwe.qlqvatdi